Hmmm... the address and Uruguay kinda rang a bell. Abou a month ago, I was setting up a firewall on another computer and the 201.8.6.145 address showed up in the blocked log. As far as I know, the only thing on that computer, besides Windows, was shareza. But it generally commuicates through a set port. Perhaps someone looking for music?
Even if this was the case and aleph has a file sharing program on his computer, it doesn't explain the mail sanner icon.
whois lookup
OrgName: Latin American and Caribbean IP address Regional Registry
OrgID: LACNIC
Address: Potosi 1517
City: Montevideo
StateProv:
PostalCode: 11500
Country: UY
ReferralServer: whois://whois.lacnic.net
NetRange: 201.0.0.0 - 201.255.255.255
CIDR: 201.0.0.0/8
NetName: LACNIC-201
NetHandle: NET-201-0-0-0-1
Parent:
NetType: Allocated to LACNIC
NameServer: NS.LACNIC.NET
NameServer: NS2.DNS.BR
NameServer: TINNIE.ARIN.NET
NameServer: NS-SEC.RIPE.NET
NameServer: SEC3.APNIC.NET
NameServer: NS1.AFRINIC.NET
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see
http://www.lacnic.net/ for further details,
Comment: or check the WHOIS server located at whois.lacnic.net
RegDate: 2003-04-03
Updated: 2005-12-05
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: (+55) 11 5509-3522
OrgTechEmail: whois-contact@lacnic.net
# ARIN WHOIS database, last updated 2005-12-05 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.